Additional note to Step 13 and 14:
I forgot to switch the Proxy Mode to “Transparent SSL”.
After doing that, the blocking of the defined Domains works with one exception.
If I want to open one site on nethserver.org comes a certificates error but the domain is not blocked.